Microsoft.Policies.MicrosoftAccount• Machine
Only allow device authentication for the Microsoft Account Sign-In Assistant
This setting determines whether to only allow enterprise device authentication for the Microsoft Account Sign-in Assistant service (wlidsvc). By default, this setting is disabled and allows both user and device authentication. When the value is set to 1, only allow device authentication, and block user authentication.
Policy Details
- Policy Name
- MicrosoftAccount_RestrictToEnterpriseDeviceAuthenticationOnly
- Registry Key
- Software\Microsoft\Windows\CurrentVersion\Policies\System
- Value Name
- EnterpriseDeviceAuthOnly
- Supported On
- At least Windows 11 Version 22H2
- Policy State Values
- Enabled: 1Disabled: 0
- Available Languages
- en-us